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DETAILED ACTION 

1. Applicant's amendment filed on June 19, 2007 has been entered. Claims 1-3, 5- 
11, 14-34 are pending. Claims 4, 12, 13 are canceled by the applicant and claims 1, 6, 
11, 14, 20, 21, 26-31 are also amended by the applicant. 

2. The Office would like to notify the Applicant that there has been a change in the 
Examiner to conduct the future examination and prosecution processes of the currently 
pending application. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

3. Claims 26-31 and 34 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. 

Claims 26-31, 34 recite "A computer-usable storage medium, having computer 
executable instructions for The claimed computer-usable storage medium 

carrying/storing a compute program/instructions without creating any functional 
interrelationship, either as part of the stored data or as part of the computing processes 
performed by the computer, and such descriptive material alone doesn't impart 
functionality either to the data as so structured, or to the computer. Therefore, claims 
26-31 are not statutory since no requisite functionality is present to satisfy the practical 
application requirement. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-3, 5-9, 11, 14-17, 19-23, 25-29, 31-34 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Weissman (US Pub. No. 2002/0156905) in 
view of Jamieson et al (US Pub. No. 2005/0005094) and in view of McCarty et al (US 
Patent No. 7,093,020). 

As per claim 1 , Weissman teaches: 

in response to a user performing only a single sign-on for said first restricted application, 
providing access to said first restricted application for said user [Fig. 3, paragraph 0022, 
paragraph 0019]. 

Weissman teaches displaying, to said user information identifying said at least one 
additional restricted application [paragraph 0019 lines 7-11]; in response to a user's 
selection, from said displayed information, of a selected additional restricted application 
from the at least one additional restricted application, providing access to said selected 
additional restricted application [Fig. 3, paragraph 0022, 0019, 0025]. Weissman 
doesn't expressively mention registering the application with the at least one additional 
application. 
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Jamieson teaches single sign-on service across Multi-domain environment [Fig. 4]; 
registering a first restricted application with at least one additional restricted application 
[paragraph 0068, 0069 lines 7-10]; in response to a user performing only a single sign- 
on for said first restricted application, providing access to said first restricted application 
for said user [Fig. 4, paragraph 0039]. 

Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Jamieson with Weissman, since one would have 
been motivated to provide a mechanism whereby a user who has signed on in a first 
domain may sing on to a second domain without having to manually enter the sing-on 
credentials in the second domain [paragraph 0001 lines 3-6]. 
McCarty teaches: 

identifying said at least one additional restricted application accessible using said single 
sign-on; displaying, to said user information identifying said at least one additional 
restricted application; and in response to a user's selection, from said displayed 
information, of a selected additional restricted application from the at least one 
additional restricted application, providing access to said selected additional restricted 
application [Fig. 3, 4, col. 3 lines 31-35, col. 13 lines 15-49, col. 14 lines 4-12]. 
Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the, invention was made to combine McCarty with Weissman and Jamieson, since one 
would have been motivated to provide a seamless user interface as a user accesses 
different web-based external systems, while maintaining the independence of the 
external systems [McCarty, col. 2 lines 43-45]. 
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As per claim 2 , the rejection of claim 1 is incorporated and Jamieson teaches: 
performing a single registration for all authorized users of said first restricted 
application [paragraph 0080, 0009 lines 12-15]. 

As per claim 3 , the rejection of claim 1 is incorporated and Jamieson teaches: 
performing a plurality of registrations, for a plurality of groups of authorized 
users of said first restricted application; and providing an access level for each of said 
groups [paragraph 0080, 0009, 0076], 

As per claim 5 , the rejection of claim 1 is incorporated and Weissman teaches: 
no additional key repository is required by said restricted applications [Fig. 3]. 

As per claim 6 , the rejection of claim 1 is incorporated and McCarty teaches: 
Said displaying further comprises said first restricted application 
sending a document in hypertext markup language, wherein said document includes at 
least one of a list or menu and wherein said at least one list or menu includes areas that 
are selectable by said user [Fig. 4, col. 13 lines 15-25, 35-49]. 

As per claim 7 , the rejection of claim 1 is incorporated and Weissman teaches: 
receiving via said first restricted application a selection signal from said user; and 
in response to said selection signal, sending via said first restricted application a 
request for access to said at least one additional restricted application [Fig. 3, 0022, 
0019]. 
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As per claim 8 , the rejection of claim 7 is incorporated and McCarty teaches: 
said user clicks a mouse button when a cursor is positioned over a predefined area 
of said presented information, to produce said selection signal [Fig. 4, col. 13 lines 35- 
47, col. 14 lines 4-12, 19-28]. 

As per claim 9 , the rejection of claim 1 is incorporated and McCarty teaches: 

collecting stored information regarding a user and an appropriate level of access; 

and sending to said user: a token and a redirect URL pointing to said at least one 

additional restricted application [Fig. 3, 5, 6, col. 10 lines 15-22, 51-65]. 

In addition, Jamieson teaches: collecting stored information regarding a user and an 

appropriate level of access; and sending to said user: a token and redirecting to said at 

least one additional restricted application [Fig. 4, 0052, 0053, 0056]. 

As per claim 11 , the rejection of claim 1 is incorporated and Weissman teaches: 

one of said restricted applications is at least one of an intranet web server, a 

portal, or a web application [Fig. 3]. 

As per claim 14 , it encompasses limitations that are similar to limitations of claim 1. 

Thus, it is rejected with the same rationale applied against claim 1 above. 

As per claim 15 , the rejection of claim 14 is incorporated and McCarty teaches: 
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under control of said second restricted application, receiving from said first restricted 
application, a request to initiate said automatically logging in; sending to said user's 
client, via said first restricted application a response, having a complete-automatic-log-in 
URL, and token; receiving directly from said user's client a request, having said token; 
and sending directly to said user's client a response, having authenticated session 
information, and a welcome URL [Fig. 3, col. 3 lines 30-50, Fig. 5, 6, col. 15 lines 40-67, 
col. 16 lines 1-67, col. 17 lines 1-38]. 

As per claim 16 . the rejection of claim 15 is incorporated and Jamieson teaches: 

in response to said request to initiate, creating said token; storing a copy of said token; 

and associating said token with said request to initiate [Fig. 4, 0049, 0094]. 

As per claim 17 . the rejection of claim 15 is incorporated and Jamieson teaches: 
verifying said token received from said user's client; and establishing a relationship and 
access level for said user's client [paragraph 0096]. 

As per claim 19 . the rejection of claim 14 is incorporated and Jamieson teaches: 
under control of said first restricted application, receiving from said user's client a 
request for access to said second restricted application; in response to said request for 
access, determining for said user, and said second restricted application, what level of 
access should be granted; and sending to said second restricted application a request 
to initiate said automatically logging in [Fig. 4, paragraph 0006, 0007, 0009, 0092-0098]. 
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As per claims 20 and 26 , it encompasses limitations that are similar to limitations of 
claim 1. Thus, it is rejected with the same rationale applied against claim 1 above. 

As per claims 21 and 27 , the rejection of claims 20 and 26 are incorporated and it 
encompasses limitations that are similar to limitations of claim 15. Thus, it is rejected 
with the same rationale applied against claim 15 above. 

As per claims 22 and 28 , the rejection of claims 21 and 27 are incorporated and it 
encompasses limitations that are similar to limitations of claim 16. Thus, it is rejected 
with the same rationale applied against claim 16 above. 

As per claims 23 and 29 , the rejection of claims 21 and 27 are incorporated and it 
encompasses limitations that are similar to limitations of claim 17. Thus, it is rejected 
with the same rationale applied against claim 17 above. 

As per claims 25 and 31 , the rejection of claims 20 and 26 are incorporated and it 
encompasses limitations that are similar to limitations of claim 19. Thus, it is rejected 
with the same rationale applied against claim 19 above. 

As per claim 32 , the rejection of claim 1 is incorporated and McCarty teaches: 
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said displaying further comprises said first restricted application sending a 
document in hypertext markup language, wherein said document includes at least one 
of a list or menu and wherein said at least one list or menu includes areas that are 
selectable by said user [Fig. 3, 4, col. 13 lines 15-25, 35-45, col. 14 lines 4-28]. 

As per claim 33 , the rejection of claim 20 is incorporated and it encompasses limitations 
that are similar to limitations of claim 32. Thus, it is rejected with the same rationale 
applied against claim 32 above. 

As per claim 34 , the rejection of claim 26 is incorporated and it encompasses limitations 
that are similar to limitations of claim 32. Thus, it is rejected with the same rationale 
applied against claim 32 above. 

5. Claims 10, 18, 24 and 30 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Weissman (US Pub. No. 2002/0156905) in view of Jamieson et al 
(US Pub. No. 2005/0005094) in view of McCarty et al (US Patent No. 7,093,020) and in 
view of McCrory et al (US Pub. No. 2003/0105810). 

As per claim 10 , the rejection of claim 9 is incorporated and Jamieson teaches: 
said token is encrypted [paragraph 0072 lines 1-3]. 
McCrory teaches: 

said token represents said appropriate level of access [paragraph 00071 lines 21-23]. 
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Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine McCrory with Weissman, Jamieson and McCarty, 
since one would have been motivated to enable resource sharing and more efficient 
resource allocation [McCrory, paragraph 0005 lines 14-15]. 

As per claim 18 , the rejection of claim 15 is incorporated and it encompasses limitations 
that are similar to limitations of claim 10. Thus, it is rejected with the same rationale 
applied against claim 10 above. 

As per claims 24 and 30 , the rejection of claims 21 and 30 are incorporated and it 
encompasses limitations that are similar to limitations of claim 10. Thus, it is rejected 
with the same rationale applied against claim 10 above. 

Response to Amendment 

6. Applicant has amended claims 1, 6, 11, 14, 20, 21, 26-31 and added claims 32- 
34, which necessitated new ground of rejection. See rejection above. 

Applicant has amended claims 26-31 to include the limitations "A computer- 
usable storage medium..." to correct the 35 U.S.C. 101 issue. However, the newly 
amended claims have not overcome such deficiency. See 35 U.S.C. 101 rejection 
above. 
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Conclusion 

7. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Howard et al (US 6678731) - Controlling access to a network server suing an 
authentication ticket 

Danneels et al (US 6571339) - Use of a processor identification for authentication 
Rajan et al (US 6725425) — Method and apparatus for retrieving information from semi- 
structured, web-based data sources. 

8. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Nirav Patel whose telephone number is 571- 
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272- 5936. If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on 571-272-3859. The fax and phone 
numbers for the organization where this application or proceeding is assigned is 571- 

273- 8300. Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 571-272- 
2100. 



NBP 

8/28/07 



